Did Meraki Radius servers get a new certificate this night ?

[thomasthomsen]

There seems to be some trouble getting online for some customers this morning.

It seems to revolve around the Meraki Radius server.

Did it get a new certificate ?

If yes, where can we keep track of such updates before hand ?

/Thomas

[thomasthomsen]

Im also pretty sure this guide is very wrong today.

Regarding certificates.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_Clients_for_802.1X_and...

"Under Protected EAP Properties, uncheck Validate server certificate - if you do want to validate server certificate, please make sure 'Go Daddy Class 2 Certification Authority' and http://valicert.com is checked in the Trusted Root Certification Authorities list"

Ehh no ... valicerts.com ? huh ... that just seems so wrong. Have you seen that site ?

/Thomas

[thomasthomsen]

Found the problem (I think):

Windows update : https://support.microsoft.com/en-us/topic/may-11-2021-kb5003173-os-builds-19041-985-19042-985-and-19...

Under "known issues": 

"System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10."

That's most like the issue.